places

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill makes runtime requests to the public Camino API (https://api.getcamino.ai/search) and ingests returned place data and street-level photos/web-enriched content from that third-party service, which is public/untrusted content the agent is expected to read.